Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9122B85/90E97D7089BE11EEBCF29A55C4F9AE02/aepi4_A-R8A3Gb7bFrTKJzuLMQM.mft
File:                     aepi4_A-R8A3Gb7bFrTKJzuLMQM.mft (raw, json)
Hash identifier:          PD3M7ekn56Piu3Q+kZAo4pXqrgfAxvblkimYBBi44a8=
Subject key identifier:   52:F8:39:0F:28:4E:42:36:AE:F7:5B:C7:36:8B:A2:96:65:B0:6B:D1
Authority key identifier: 69:EA:62:E3:F0:3E:47:C0:37:19:BE:DB:16:B4:CA:27:3B:8B:31:03
Certificate issuer:       /CN=A9122B85/serialNumber=69EA62E3F03E47C03719BEDB16B4CA273B8B3103
Certificate serial:       01C1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aepi4_A-R8A3Gb7bFrTKJzuLMQM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9122B85/90E97D7089BE11EEBCF29A55C4F9AE02/aepi4_A-R8A3Gb7bFrTKJzuLMQM.mft
Manifest number:          01BB
Signing time:             Wed 25 Mar 2026 03:13:29 +0000
Manifest this update:     Wed 25 Mar 2026 03:13:29 +0000
Manifest next update:     Wed 01 Apr 2026 03:13:29 +0000
Files and hashes:         1: aepi4_A-R8A3Gb7bFrTKJzuLMQM.crl (hash: 3CMvEU9+bBgEOH3O5utWJxy9kS0WukoljjZYHp9y0fs=)
                          2: 0287BD068A3D11EEADFABF09C4F9AE02.roa (hash: 0hXjfHbURh148I/8mqPMNcEAW0wUw9merHSuJ0Q2WMM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9122B85/90E97D7089BE11EEBCF29A55C4F9AE02/aepi4_A-R8A3Gb7bFrTKJzuLMQM.crl
                          rsync://rpki.apnic.net/member_repository/A9122B85/90E97D7089BE11EEBCF29A55C4F9AE02/aepi4_A-R8A3Gb7bFrTKJzuLMQM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aepi4_A-R8A3Gb7bFrTKJzuLMQM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 03:13:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 449 (0x1c1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9122B85, serialNumber=69EA62E3F03E47C03719BEDB16B4CA273B8B3103
        Validity
            Not Before: Mar 25 03:13:29 2026 GMT
            Not After : Apr  1 03:13:29 2026 GMT
        Subject: CN=69c352d9-c35a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:88:de:95:74:49:c9:f6:2b:9c:5e:9a:2a:b6:
                    e1:a3:99:35:df:2f:c4:ff:c3:8c:5f:71:32:a2:a4:
                    34:41:93:a7:70:44:8e:0c:a6:ea:43:4d:54:77:09:
                    fb:12:47:2c:4d:26:dd:5f:77:3a:ec:31:5c:05:2a:
                    3a:e4:0c:ce:44:b1:e6:5e:7d:29:0e:37:44:fa:61:
                    1c:f0:91:2b:c3:7a:d3:2d:ee:e7:5d:c8:17:bc:71:
                    75:09:2b:43:fa:9d:19:28:83:2e:57:61:38:5c:ca:
                    2f:b4:6f:c2:60:4c:9f:db:c3:f7:71:83:8c:a7:5c:
                    9a:a5:6c:46:7e:58:37:66:a0:9b:5b:c9:b7:f6:9a:
                    e6:d6:51:2a:a7:78:1c:6a:b5:2c:2a:7f:7e:c7:71:
                    44:86:c7:a6:a3:dc:17:3f:ba:74:1b:a3:f5:32:1f:
                    ee:56:78:c6:0a:70:64:51:bb:48:cc:eb:d0:51:ca:
                    75:bb:85:de:21:70:12:e5:1c:88:21:c0:8e:74:25:
                    32:7a:39:28:f1:b4:5a:d0:2e:0b:3b:50:3c:46:f7:
                    c8:dc:fa:77:79:c1:18:bd:1b:c8:a8:4a:3d:f0:9b:
                    74:ec:ee:fe:8d:a6:1d:0c:e9:a0:24:7b:06:ba:ce:
                    4a:43:4c:af:58:17:7a:0b:5f:8d:2a:ad:6a:7d:77:
                    2a:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:F8:39:0F:28:4E:42:36:AE:F7:5B:C7:36:8B:A2:96:65:B0:6B:D1
            X509v3 Authority Key Identifier:
                keyid:69:EA:62:E3:F0:3E:47:C0:37:19:BE:DB:16:B4:CA:27:3B:8B:31:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9122B85/90E97D7089BE11EEBCF29A55C4F9AE02/aepi4_A-R8A3Gb7bFrTKJzuLMQM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aepi4_A-R8A3Gb7bFrTKJzuLMQM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122B85/90E97D7089BE11EEBCF29A55C4F9AE02/aepi4_A-R8A3Gb7bFrTKJzuLMQM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:d9:8f:f1:ea:42:31:80:50:93:da:3f:d1:87:bf:1f:c5:2e:
         a4:19:0e:73:84:33:93:a9:fb:a8:a3:9c:8b:2d:81:de:d6:44:
         f2:4d:fb:eb:ca:63:5e:1f:7a:1b:28:92:ef:f2:af:95:ea:1a:
         a1:b6:40:19:da:d8:79:fd:87:42:01:43:4c:cb:ce:68:b0:a7:
         a5:95:dc:42:0c:c1:4f:0d:b9:93:b3:ce:27:fc:48:7f:cd:6a:
         2a:36:54:4a:06:e9:b3:0b:4d:65:02:3a:d5:79:84:bb:e5:e3:
         53:9e:c9:99:2a:6d:e1:f8:d8:fc:da:c3:6e:38:6a:ac:6c:87:
         fc:8c:d7:2b:20:5b:a9:11:3c:0f:b7:61:8b:d8:43:29:2e:8c:
         20:d2:43:fe:63:56:cd:7f:0e:aa:6b:1c:f3:35:d1:77:c5:46:
         be:b6:56:1f:1b:cb:74:e0:39:a0:2e:f6:80:46:41:fb:70:21:
         42:94:f9:63:b7:95:d8:8c:7d:f1:d6:50:58:5a:c3:24:76:57:
         9c:d6:25:d2:81:12:8f:7a:79:d8:bd:a3:33:50:0f:94:8c:70:
         cd:8a:27:bc:66:8f:30:e9:dc:5b:4b:42:d5:1c:7a:bf:af:aa:
         3c:57:5b:d2:26:2c:bb:19:b0:3d:a4:25:d9:fa:b4:93:68:20:
         1a:d2:09:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:54:56 2026 by rpki-client